$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json) Hash identifier: c50G1npIGhxHV1VqDp0iAAGdo75Vk+4IhOl/ZgHxots= Subject key identifier: 44:A9:82:EC:7F:55:51:2A:BB:9F:60:65:85:57:5B:17:C9:90:12:C0 Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A Certificate serial: 3505BBC9A73196A0C24AB53C3C1D0F8B9577F001 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft Manifest number: 0136 Signing time: Sat 06 Sep 2025 23:31:38 +0000 Manifest this update: Sat 06 Sep 2025 23:26:38 +0000 Manifest next update: Wed 10 Sep 2025 05:22:38 +0000 Files and hashes: 1: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 0SClEliKB0AlO5DzEurqFtVJ6yiiJ9eJczPmmj9dw18=) 2: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: bPc4b5qxJUD7MvD1jtnenTmwflXIEjFWrU7nHJj7QHo=) 3: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: WMWtIWXP3rHM6u9VZyFOIHKvW80yliOmPYEco+tmVZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:05:bb:c9:a7:31:96:a0:c2:4a:b5:3c:3c:1d:0f:8b:95:77:f0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A Validity Not Before: Sep 6 23:26:38 2025 GMT Not After : Sep 10 05:22:38 2025 GMT Subject: CN=44A982EC7F55512ABB9F606585575B17C99012C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:4c:5d:47:50:dd:44:0b:e2:ce:3e:a2:2b: 17:e6:36:80:c3:ab:02:d4:ff:68:7a:ed:84:81:1a: 47:2c:9a:b6:be:74:b1:a3:01:8b:21:d3:7b:b8:69: 12:11:96:ff:41:c6:70:a0:67:21:4e:25:9a:6f:33: 39:b1:33:77:bd:ed:95:c7:91:b2:a2:ad:c5:89:fd: f3:6c:1e:82:c1:cf:57:0f:93:67:5d:7c:53:9a:dd: b7:95:d3:70:16:b3:cc:ad:25:ff:ea:22:14:2b:a9: d6:7a:51:96:ce:9c:ec:aa:b7:3e:51:7f:4b:4a:c8: cf:f4:dd:71:74:8f:67:ac:33:90:bf:bd:62:77:7f: 31:6b:25:af:ee:74:1a:57:ea:e7:32:8d:d7:e3:ea: 89:bb:87:c2:c5:17:08:81:41:96:4e:cb:21:4d:87: 12:a9:23:4b:14:a8:e2:8c:d2:a0:bf:bf:d6:99:4f: d4:7f:a7:42:12:b2:44:53:e1:ee:4e:31:79:a0:9b: 9c:0a:17:45:61:e2:92:34:c9:e7:ea:8b:fe:7b:36: cf:2f:6e:7d:d1:81:c7:1f:fe:de:1b:3f:c4:b6:ec: a9:e5:bf:73:41:d1:2c:7b:ff:a6:e5:a2:f4:63:dc: ad:de:30:64:94:3b:a8:26:45:61:91:2f:9a:06:db: b9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A9:82:EC:7F:55:51:2A:BB:9F:60:65:85:57:5B:17:C9:90:12:C0 X509v3 Authority Key Identifier: keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9f:81:7e:c5:0a:cf:50:58:5d:f6:99:c3:34:40:25:a9:f5: a8:6e:d0:a5:d1:1f:40:bb:da:7f:d8:35:16:dd:79:78:84:3c: 31:42:83:6e:38:be:4b:5a:ca:76:34:20:40:d7:e7:9e:6c:45: 2f:ba:7c:31:ae:4c:cf:d3:00:23:75:56:ba:4f:79:27:c3:8c: aa:fc:03:31:f0:00:b6:51:21:26:77:87:56:06:46:f2:ea:0a: 25:54:99:2a:17:3c:b8:27:5a:60:f6:90:a7:b2:a2:8c:63:77: 51:8b:5d:9c:70:84:87:65:dd:44:23:4a:55:b1:5a:f3:8b:00: 15:52:4f:bd:1b:19:94:e1:9f:20:03:cd:97:a6:1b:a6:5d:62: cc:71:9b:46:64:60:50:94:96:d1:a1:e3:75:da:05:92:c2:43: 19:84:1d:a6:32:8b:91:68:68:ed:71:0d:4b:93:4b:4b:ee:6a: c0:da:32:44:55:44:fe:ec:96:46:97:6a:06:b5:bd:f0:e3:4a: cc:e0:37:a2:9b:ba:46:b1:13:48:61:f7:86:09:a6:05:1d:ec: 34:ca:fd:df:16:98:56:c2:fb:b9:07:86:f5:46:28:7e:24:86: cb:0d:d5:20:03:06:de:54:a4:b6:42:95:fc:9a:5c:a9:eb:78: 16:58:b8:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQW7yacxlqDCSrU8PB0Pi5V38AEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5Mjkz NkNFQTU0QTAeFw0yNTA5MDYyMzI2MzhaFw0yNTA5MTAwNTIyMzhaMDMxMTAvBgNV BAMTKDQ0QTk4MkVDN0Y1NTUxMkFCQjlGNjA2NTg1NTc1QjE3Qzk5MDEyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqExdR1DdRAvizj6iKxfmNoDD qwLU/2h67YSBGkcsmra+dLGjAYsh03u4aRIRlv9BxnCgZyFOJZpvMzmxM3e97ZXH kbKircWJ/fNsHoLBz1cPk2ddfFOa3beV03AWs8ytJf/qIhQrqdZ6UZbOnOyqtz5R f0tKyM/03XF0j2esM5C/vWJ3fzFrJa/udBpX6ucyjdfj6om7h8LFFwiBQZZOyyFN hxKpI0sUqOKM0qC/v9aZT9R/p0ISskRT4e5OMXmgm5wKF0Vh4pI0yefqi/57Ns8v bn3Rgccf/t4bP8S27Knlv3NB0Sx7/6blovRj3K3eMGSUO6gmRWGRL5oG27m7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURKmC7H9VUSq7n2BlhVdbF8mQEsAwHwYDVR0j BBgwFoAUSpBtT1NLJqDmKJiIJjApKTbOpUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMC80QTkwNkQ0RjUz NEIyNkEwRTYyODk4ODgyNjMwMjkyOTM2Q0VBNTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5MjkzNkNF QTU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5 MjkzNkNFQTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+fgX7FCs9QWF32mcM0QCWp9ahu0KXRH0C7 2n/YNRbdeXiEPDFCg244vktaynY0IEDX555sRS+6fDGuTM/TACN1VrpPeSfDjKr8 AzHwALZRISZ3h1YGRvLqCiVUmSoXPLgnWmD2kKeyooxjd1GLXZxwhIdl3UQjSlWx WvOLABVST70bGZThnyADzZemG6ZdYsxxm0ZkYFCUltGh43XaBZLCQxmEHaYyi5Fo aO1xDUuTS0vuasDaMkRVRP7slkaXaga1vfDjSszgN6KbukaxE0hh94YJpgUd7DTK /d8WmFbC+7kHhvVGKH4khssN1SADBt5UpLZClfyaXKnreBZYuKM= -----END CERTIFICATE-----Generated at Mon Sep 8 11:25:54 2025 by rpki-client